Social Engineering

Attackers impersonate executives — increasingly with AI voice and video deepfakes — to authorise fraudulent payments and access. How the attack works, who is exposed, and how to defend.

AI-enabled cyberattacks are real but bounded. Learn how attackers misuse LLMs for phishing and recon, why guardrails limit uplift, and how to defend.

The IT service desk is now a primary attack surface. Learn the Scattered Spider playbook and the concrete identity-verification, monitoring, and Conditional Access controls that stop attackers from calling in to reset passwords and MFA.

An independent, defensive roundup of August 2026’s biggest cyber incidents: the BeyondTrust Remote Support zero-day (CVE-2026-102764) exploited by a China-nexus actor from late August, the McKesson and Manchester Airports Group breaches, a record 997 ransomware claims, social-engineering hits on Apollo, RingCentral and Carhartt, OT attacks on energy and water, and the AI angle. Each item carries a status label (Confirmed / Claimed / Reported) and a subjective 1–10 severity read.

Live video can now be edited faster than you can blink — faces swapped, backgrounds changed, all in real time on a webcam stream. Here is why that breaks video-based identity verification, supercharges executive impersonation fraud, and what security leaders should do about it.